summaryrefslogtreecommitdiff
path: root/src/CNNICHashWhitelist.inc
AgeCommit message (Collapse)Author
2017-02-04crypto: Remove expired certs from CNNIC whitelistShigeki Ohtsu
CNNIC Whitelist was updated with removing expired certificates. Fixes: https://github.com/nodejs/node/pull/1895 PR-URL: https://github.com/nodejs/node/pull/9469 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com> Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
2015-06-16crypto: add cert check to CNNIC WhitelistShigeki Ohtsu
When client connect to the server with certification issued by either CNNIC Root CA or CNNIC EV Root CA, check hash of server certification in the list of CNNICHashWhitelist.inc. If it's not, CERT_REVOKED error returns. See for details in https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/ PR-URL: https://github.com/nodejs/io.js/pull/1895 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>